CO
Product
Controller
On CISA KEVExploited in the wild
17
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 10Medium 3Low 0
Watch
Add Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-50603 In wildKEV | 9.8 | Jan 8 | Aviatrix Controllers OS Command Injection Vulnerability Affected: before 7.1.4191; 7.2.0 before 7.2.4996 |
| CVE-2021-40870 In wildKEV | 9.8 | Sep 13 | Aviatrix Controller Unrestricted Upload of File Affected: 6.2 before 6.2.2043; 6.3 before 6.3.2490; 6.4 before 6.4.2838; 6.5 before 6.5.1922 |
| CVE-2020-26553 | 9.8 | Nov 17 | An issue was discovered in Aviatrix Controller before R6.0.2483 Affected: 5.3.1516 |
| CVE-2020-13417 | 9.8 | May 22 | An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224 Affected: before 5.3 |
| CVE-2020-26548 | 8.8 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.4.1290 Affected: 5.3.1516 |
| CVE-2020-13412 | 8.8 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1204 Affected: before 5.4.1204 |
| CVE-2025-2171 | 7.8 | Jun 23 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 do not enforce rate limiting on password reset attempts, allowing adversaries to brute force guess the 6-digit… Affected: All versions, or not specified |
| CVE-2020-27568 | 7.5 | Apr 21 | Insecure File Permissions exist in Aviatrix Controller 5.3.1516 Affected: 5.3.1516 |
| CVE-2020-26552 | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R6.0.2483 Affected: 5.3.1516 |
| CVE-2020-26551 | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.3.1151 Affected: 5.3.1516 |
| CVE-2020-26550 | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.3.1151 Affected: 5.3.1516 |
| CVE-2020-26549 | 7.5 | Nov 17 | An issue was discovered in Aviatrix Controller before R5.4.1290 Affected: 5.3.1516 |
| CVE-2020-13415 | 7.5 | May 22 | An issue was discovered in Aviatrix Controller through 5.1 Affected: through 5.1 |
| CVE-2020-13414 | 7.5 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1204 Affected: before 5.4.1204 |
| CVE-2025-2172 | 6.6 | Jun 23 | Aviatrix Controller versions prior to 7.1.4208, 7.2.5090, and 8.0.0 fail to sanitize user input prior to passing the input to command line utilities, allowing command injection… Affected: All versions, or not specified |
| CVE-2020-13416 | 6.5 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1066 Affected: before 5.4.1066 |
| CVE-2020-13413 | 5.3 | May 22 | An issue was discovered in Aviatrix Controller before 5.4.1204 Affected: before 5.4.1204 |
Showing 17